---
# =================================================================
# PostgreSQL Infrastructure Role - Simplified Configuration
# =================================================================
# Provides PostgreSQL database server as shared infrastructure
# Applications manage their own databases/users

# =================================================================
# Essential Configuration
# =================================================================

# Service Management
postgresql_service_enabled: true
postgresql_service_state: "started"

# Network Security
postgresql_listen_addresses: "localhost"
postgresql_port: 5432

# Unix Socket Configuration  
postgresql_unix_socket_enabled: true
postgresql_unix_socket_directories: "/var/run/postgresql"
postgresql_unix_socket_permissions: "0770"

# Authentication
postgresql_auth_method: "scram-sha-256"

# Database Cluster Setup
postgresql_encoding: "UTF8"
postgresql_locale: "C.UTF-8"
postgresql_data_checksums: true

# Security
postgresql_systemd_security: true

# =================================================================
# Optional Performance (Conservative Defaults)
# =================================================================

# Basic performance settings - PostgreSQL defaults are excellent
postgresql_max_connections: 100
postgresql_shared_buffers: "128MB"

# =================================================================
# Infrastructure Notes
# =================================================================
# This role provides minimal PostgreSQL infrastructure
# Applications should create their own databases/users:
#
# - postgresql_user:
#     name: myapp
#     password: "{{ vault_myapp_password }}"
# - postgresql_db:
#     name: myapp
#     owner: myapp
#
# PostgreSQL's built-in defaults are used for everything else